Login Request a demo
PS
Product
Peel Shopping
by Peel · last CVE Jun 15, 2022
8
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 1High 1Medium 4Low 0
Severity
All severities8Critical1High1Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Peel Shopping to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-37593
9.1
5%
Jul 30
PEEL Shopping version 9.4.0 allows remote SQL injection
Affected: 9.4.0
CVE-2018-20848
8.8
1%
Jun 30
Advisto PEEL SHOPPING 9.0.0 has CSRF via en/achat/caddie_ajout.php and en/achat/caddie_affichage.php, as demonstrated by an XSS payload in the couleurId[0] parameter to the latter
Affected: 9.0.0
CVE-2021-41672
6.5
1%
Jun 15
PEEL Shopping CMS 9.4.0 is vulnerable to authenticated SQL injection in utilisateurs.php
Affected: 9.4.0
CVE-2019-20178
6.5
0%
Jan 9
Advisto PEEL Shopping 9.2.1 has CSRF via administrer/utilisateurs.php to delete a user
Affected: 9.2.1
CVE-2021-27190
5.4
2%
Feb 12
A Stored Cross Site Scripting(XSS) Vulnerability was discovered in PEEL SHOPPING 9.3.0 and 9.4.0, which are publicly available
Affected: 9.3.0; 9.4.0
CVE-2018-1000887
4.8
1%
Dec 28
Peel shopping peel-shopping_9_1_0 version contains a Cross Site Scripting (XSS) vulnerability that can result in an authenticated user injecting java script code in the "Site Name…
Affected: 9.1.0
CVE-2012-5227
–
1%
Oct 1
SQL injection vulnerability in administrer/tva.php in Peel SHOPPING 2.8 and 2.9 allows remote attackers to execute arbitrary SQL commands via the id parameter
Affected: 2.8; 2.9
CVE-2012-5226
–
2%
Oct 1
Multiple cross-site scripting (XSS) vulnerabilities in Peel SHOPPING 2.8 and 2.9 allow remote attackers to inject arbitrary web script or HTML via the (1) motclef parameter to…
Affected: 2.8; 2.9
Showing 8